AMD fix status: https://www.amd.com/en/resources/product-security/bulletin/amd-s...

edelbitter · 2024-09-12T19:20:51 1726168851

> Please refer to your OEM for the BIOS update specific to your product.

Unless running hardware also used by powerful hosting providers (some of which care for security), these mitigation will not reach many systems. Checked a few "client" samples, seems like MSI has provided updated binary blobs, ASRock has provided some, Gigabyte has provided broken ones first and then backdated the new ones, ASUS (ROG/RUF/CSM) and Biostar customers are still waiting.

aftbit · 2024-09-12T23:02:53 1726182173

So wait, is this fixed in BIOS or microcode?

https://git.kernel.org/pub/scm/linux/kernel/git/firmware/lin...

yencabulator · 2024-09-13T00:12:13 1726186333

Based on my reading of https://www.amd.com/en/resources/product-security/bulletin/a... there's a microcode fix for EPYC generations 1-4 that requires no downtime, everything else needs a firmware update.